diff --git a/.gitignore b/.gitignore
index 8d28cce..fd53d80 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /base64-0.7.0.crate
 /base64-0.8.0.crate
+/base64-0.9.0.crate
diff --git a/base64-0.9.0-fix-metadata.diff b/base64-0.9.0-fix-metadata.diff
new file mode 100644
index 0000000..f7d9c48
--- /dev/null
+++ b/base64-0.9.0-fix-metadata.diff
@@ -0,0 +1,8 @@
+--- base64-0.9.0/Cargo.toml	1970-01-01T01:00:00+01:00
++++ base64-0.9.0/Cargo.toml	2018-01-01T12:54:12.208067+01:00
+@@ -29,4 +29,4 @@
+ [dependencies.safemem]
+ version = "0.2.0"
+ [dev-dependencies.rand]
+-version = "0.3.15"
++version = "0.4"
diff --git a/rust-base64.spec b/rust-base64.spec
index b697f91..868e8f9 100644
--- a/rust-base64.spec
+++ b/rust-base64.spec
@@ -5,13 +5,16 @@
 %global crate base64
 
 Name:           rust-%{crate}
-Version:        0.8.0
+Version:        0.9.0
 Release:        1%{?dist}
 Summary:        Encodes ands decode base64 as bytes or utf8
 
 License:        MIT or ASL 2.0
 URL:            https://crates.io/crates/base64
 Source0:        https://crates.io/api/v1/crates/%{crate}/%{version}/download#/%{crate}-%{version}.crate
+# Initial patched metadata
+# * Bump rand to 0.4, https://github.com/alicemaz/rust-base64/pull/54
+Patch0:         base64-0.9.0-fix-metadata.diff
 
 ExclusiveArch:  %{rust_arches}
 
@@ -21,7 +24,7 @@ BuildRequires:  (crate(byteorder) >= 1.1.0 with crate(byteorder) < 2.0.0)
 BuildRequires:  (crate(safemem) >= 0.2.0 with crate(safemem) < 0.3.0)
 %if %{with check}
 # [dev-dependencies]
-BuildRequires:  (crate(rand) >= 0.3.15 with crate(rand) < 0.4.0)
+BuildRequires:  (crate(rand) >= 0.4.0 with crate(rand) < 0.5.0)
 %endif
 
 %description
@@ -58,6 +61,9 @@ which use %{crate} from crates.io.
 %{cargo_registry}/%{crate}-%{version}/
 
 %changelog
+* Mon Jan 01 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.9.0-1
+- Update to 0.9.0
+
 * Sat Nov 18 2017 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 0.8.0-1
 - Update to 0.8.0
 
diff --git a/sources b/sources
index 81a478c..091cbbb 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (base64-0.8.0.crate) = 7ce30633e5fa48cf0103ec66183192ecfec03a64b8147f42e5fd4dc9bb0d2e7885c19f7aadb130d306b8fbef6798b97199a1ab65b7c19a08b6d35d2e076d518d
+SHA512 (base64-0.9.0.crate) = 1d2702cf90bd13c377395086765884648d3058b44514cb0c4b6244cbaa13a1fe0692f15e64dfbdde69d162f58f8ac06f23aa215ffd316c6b687b3b362781c636